Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: zDxtsdIZA9P4HGgfANL9It8iRprW3SQmNOFRHt9ReK8=
Subject key identifier: AD:B1:B5:8A:BC:1F:C7:00:29:55:EC:0D:B6:DC:B5:1E:53:46:88:7B
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019CADC850EF1397D017CEFA0A6B4920A236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0B77
Signing time: Mon 02 Mar 2026 09:01:52 +0000
Manifest this update: Mon 02 Mar 2026 09:01:52 +0000
Manifest next update: Tue 03 Mar 2026 09:01:52 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: h8KAqLD6YGEtN5gm0LMhqqjThYt39l5Ls1yR7ZlhQoA=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:50:ef:13:97:d0:17:ce:fa:0a:6b:49:20:a2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Mar 2 09:01:52 2026 GMT
Not After : Mar 3 09:01:52 2026 GMT
Subject: CN=adb1b58abc1fc7002955ec0db6dcb51e5346887b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:de:e9:4f:c1:34:db:e7:aa:96:aa:a3:4b:
c7:76:a2:03:4f:33:16:d8:a7:33:ed:d4:1f:9e:d7:
de:90:9d:ef:9d:be:47:3f:9e:b1:42:26:05:ac:69:
7d:82:71:bc:65:b9:87:32:c4:42:53:f1:c2:a9:a6:
c7:9a:0c:f9:66:4e:0b:06:b1:52:6c:8f:b9:58:ea:
67:50:c2:7d:e2:d5:22:e0:bd:db:37:03:2f:3d:8f:
94:75:30:16:9a:4e:53:fb:d9:49:84:ec:a0:69:7c:
22:3b:b0:ca:28:88:f4:18:15:fc:6a:2a:ea:43:92:
eb:c3:c6:bf:12:c7:ab:2f:06:23:76:42:7c:df:e6:
c7:35:38:f8:de:78:fb:a8:09:cd:a3:48:20:50:09:
c2:07:e0:9b:2c:1d:85:40:98:f6:f4:80:84:a1:2d:
48:5b:0f:2b:76:20:f3:7f:82:3d:c8:fd:e2:79:cd:
7f:02:be:9c:ad:11:d6:51:e4:3d:ad:69:9d:31:20:
f9:7b:71:e8:80:07:90:4a:88:b9:c1:d2:7f:fb:4d:
9b:46:0f:d8:30:ed:4a:aa:b7:c3:0d:3c:d6:e4:e2:
65:46:e2:df:98:0d:84:4d:0f:9f:6b:ad:b6:eb:6b:
a5:18:39:72:54:fe:0d:31:a1:af:30:e5:fd:37:42:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:B5:8A:BC:1F:C7:00:29:55:EC:0D:B6:DC:B5:1E:53:46:88:7B
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e2:d0:60:e6:6a:e0:b0:e7:95:0e:f4:ac:34:a6:b4:37:bb:
19:fe:b9:19:dd:ad:30:6b:8a:f8:17:50:41:ef:5a:af:68:67:
2d:41:1e:b5:28:8c:69:f7:26:2a:71:bd:97:96:9e:e7:92:24:
a1:82:ec:08:34:8c:cf:64:8b:f2:6f:1c:63:f0:b8:68:c2:08:
28:f0:7c:e3:27:37:c4:d9:ba:34:ea:ac:97:79:ef:c0:a4:e4:
ec:5e:b3:ba:3e:00:fe:52:70:c8:c8:60:de:f5:76:4a:71:7e:
8c:99:0c:a2:56:0b:fe:66:34:ef:3c:aa:ee:cb:b6:18:29:e7:
c0:b3:10:27:2a:88:17:d2:b3:e6:13:8c:82:35:78:85:b7:05:
43:64:49:71:40:05:f4:43:24:80:c5:24:41:2e:59:7e:9e:58:
72:15:0c:3f:aa:c1:d6:5b:07:ac:69:4e:d8:0e:f8:ef:37:85:
86:61:7e:4b:8e:22:49:ba:cf:e8:b5:d3:6f:01:d4:b5:04:61:
fc:19:a1:8b:f4:bc:64:da:fc:cd:a8:30:92:8b:c7:52:86:b4:
7e:70:bb:cc:9f:25:b4:a9:5d:a9:83:38:11:35:89:ff:4d:a1:
96:b0:84:ed:5f:33:c4:63:c8:b9:f9:47:90:71:21:c7:98:ae:
62:c2:f3:5d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZytyFDvE5fQF876CmtJIKI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0
YTA0MzkwHhcNMjYwMzAyMDkwMTUyWhcNMjYwMzAzMDkwMTUyWjAzMTEwLwYDVQQD
EyhhZGIxYjU4YWJjMWZjNzAwMjk1NWVjMGRiNmRjYjUxZTUzNDY4ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEne6U/BNNvnqpaqo0vHdqIDTzMW
2Kcz7dQfntfekJ3vnb5HP56xQiYFrGl9gnG8ZbmHMsRCU/HCqabHmgz5Zk4LBrFS
bI+5WOpnUMJ94tUi4L3bNwMvPY+UdTAWmk5T+9lJhOygaXwiO7DKKIj0GBX8airq
Q5Lrw8a/EserLwYjdkJ83+bHNTj43nj7qAnNo0ggUAnCB+CbLB2FQJj29ICEoS1I
Ww8rdiDzf4I9yP3iec1/Ar6crRHWUeQ9rWmdMSD5e3HogAeQSoi5wdJ/+02bRg/Y
MO1KqrfDDTzW5OJlRuLfmA2ETQ+fa62262ulGDlyVP4NMaGvMOX9N0JldwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK2xtYq8H8cAKVXsDbbctR5TRoh7MB8GA1UdIwQY
MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz
LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy
OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyuLQ
YOZq4LDnlQ70rDSmtDe7Gf65Gd2tMGuK+BdQQe9ar2hnLUEetSiMafcmKnG9l5ae
55IkoYLsCDSMz2SL8m8cY/C4aMIIKPB84yc3xNm6NOqsl3nvwKTk7F6zuj4A/lJw
yMhg3vV2SnF+jJkMolYL/mY07zyq7su2GCnnwLMQJyqIF9Kz5hOMgjV4hbcFQ2RJ
cUAF9EMkgMUkQS5Zfp5YchUMP6rB1lsHrGlO2A747zeFhmF+S44iSbrP6LXTbwHU
tQRh/Bmhi/S8ZNr8zagwkovHUoa0fnC7zJ8ltKldqYM4ETWJ/02hlrCE7V8zxGPI
uflHkHEhx5iuYsLzXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:58 2026 by rpki-client